Mac OS X is a series of Unix-based graphical interface operating systems developed, marketed, and sold by Apple Inc.

learn more… | top users | synonyms

1
vote
2answers
2k views

SQL Injection tool (Mac OS X) [closed]

Do you know any software for searching (analyze) SQL injection (on website) from Snow Leopard ? I have found some that can run from Linux or Windows. I understand that most Linux (console) ...
0
votes
1answer
2k views

Single user mode for Windows

I am familiar with single user mode on OSX. By holding down Command-S, you can boot into a terminal as root. Resetting the PRAM with Command-Option-P-R will disable any firmware protection that would ...
1
vote
2answers
269 views

In what sense is Knock to Unlock safer than a password?

I've recently seen a youtube video, which is advertising an iphone app which will unlock your mac computer by knocking on your iphone. The ad is claiming that it is faster and safer than typing your ...
7
votes
4answers
644 views

Security of different OS

At my work we are given a computer to set up at home so if we ever feel like working from home we can do so. The thing is that whenever it comes to developing for java I always prefer using windows or ...
0
votes
1answer
316 views

Fishy: VMware sends all traffic through akamai

I'm running Linux inside of VMware on the Mac, and on Linux I'm running a program that has connections open to perhaps 4 different machines. On the OS/X side however VMware has only 1 active network ...
5
votes
2answers
411 views

Using FileVault on a Mac with existing data

I have recently got a Mac which I have started using already without any encryption while looking for the best solution. I have come to the conclusion that using Mac's own file encryption technology ...
2
votes
1answer
255 views

Security implications for two applications communicating with TCP/IP on localhost

Considering this for the local loopback connection: - It is implemented entirely within the operating system's networking software and passes no packets to any network interface controller. If ...
1
vote
1answer
134 views

Hardening Services, Ports on OSX

People boast about OSX Security, yet I find it very hard to find a comprehensive manual in regards to any equivalent Services and the ports they use. I am aware of lanchd and launchctl and Lingon is ...
1
vote
1answer
437 views

Intrusions attempt monitoring (on MacOS X) [closed]

I know utilities such as last exist - but not sure if it's applicable for my needs - I'd like a system to notify me of any login attempts on any of my macs (home, work or remote). Attempts from a ...
0
votes
1answer
4k views

Configuring SSL certificate on OS X 10.8.5 produces “Chain issues Contains anchor” error

I'm trying to install a Thawte SSL123 certificate on OS X 10.8.5, but having a difficulty. While the certificate and intermediates appear to be installed without any errors, running the Qualys SSL ...
0
votes
1answer
143 views

How to fetch and update all my friend's keys? [closed]

Where can I upload a list of my friends and get a list of their keys found on keyservers? Here are some key servers: http://keyserver.ubuntu.com:11371/ http://pgp.mit.edu/ ...
0
votes
2answers
240 views

Random File downloaded

Okay so I was setting up stuff on my new mac earlier, downloading flash and office. They both downloaded and installed smoothly, but after I noticed a weird new file in my 'downloads' folder: ...
1
vote
1answer
280 views

How is the FileVault master key protected?

FileVault has the functionality to both allow and disable user accounts from booting up the encrypted drive. Reference: this cnet article. See also the stack exchange question How does FileVault 2 ...
3
votes
3answers
260 views

Why Parallels 8 installer looking into my Chrome's Cookies?

While trying to install Parallels on OS X I looked into Activity Monitor to find where is the installed Parallels located (it was weird that it stays invisible in Application folder). And than I found ...
3
votes
4answers
330 views

Enforcing personal firewall for OS X

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
-4
votes
2answers
203 views

Is writing a document, not saving it, and printing it wirelessly 100% secure? [closed]

Say I want to write a top secret document (yeh, I'm a secret agent), and I use the method in the title...more specifically 1) Write a document on TextEdit on a Macbook Pro 2) Do not save it 3) ...
4
votes
5answers
6k views

Reverse engineering (decompiling) an .exe file in OSX

I am a complete newby in the reverse engineering world, and being able to decompile .exe files in my OSX is being a pain. Does anybody know a good decompiler of .exe for OSX, or any hint about where ...
3
votes
2answers
2k views

LDAP Security problems?

I have installed many Active Directory (AD) based networks and have applied various standard security templates based on best practices, however I have never really looked at LDAP on a deeper level ...
4
votes
1answer
210 views

Does Apple maintain the security of the built-in Ruby?

Does Apple maintain the security of the Ruby implementation that comes by default in OS X? I recently heard about CVE-2013-4073, but when I ran "Software Update..." on my OS X Lion box, it didn't ...
2
votes
1answer
187 views

Swatch installation's issue to detect intrusion

I have installed snort and I want to use the swatch tool to send me an email when it detects something going wrong. I am using OSX and I followed the installation guide: ...
1
vote
1answer
5k views

What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]

I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
-1
votes
1answer
660 views

Is there a way to get OS X to start a VPN connection before allowing network traffic? [closed]

I'm running OS X 10.8 and have Tunnelblick set up so I can connect to my OpenVPN server at home. I've also used this at $WORK in the past. When I'm out and about and want to jump on a public network, ...
-1
votes
2answers
5k views

Is it Possible to Dual Boot OSX Lion & Backtrack 5 R2 Smoothly? [closed]

I have a 13inch Macbook Pro i5 and I would like to duel boot backtrack 5 on it as my ram struggles a bit when I run it inside a virtualbox. I have heard stories how it has borked the install on osx, ...
1
vote
2answers
1k views

Reseting my computer to uninstall LogKext

My friend downloaded LogKext on my computer, so I'm guessing he can see every keystroke, but I've reset my computer so that it's in a condition when I first opened from the box. Can my friend still ...
4
votes
1answer
345 views

PKI integration in MAC OS

I have setup an ejbca pki and integrated certificates in MAC OS for S/MIME signing and encrypting. I have also set up a CRL distribution point and put the CRL online available on an HTTP server. ...
0
votes
2answers
235 views

“You have new mail” message

I received a message from Google saying someone entered my email account. I confirmed that there were an access from an IP in another country. I have noticed "You have new mail" message when I open ...
13
votes
6answers
11k views

How secure is FileVault 2 while the computer is in sleep mode?

How secure is Apples disk encryption FileVault 2 when someone has physical or network access while the computer in sleep mode or is running a screen saver? Are there ways to circumvent FileVault 2 ...
1
vote
1answer
680 views

I wonder if my MacBook Pro with OS X got hacked?

Maybe I am getting a little paranoid. Lately my MacBook Pro with Mac OS X 10.8.2 is behaving a little different the usual. The last strange thing that happend was that in iTerm2 when I tried to sudo ...
5
votes
4answers
444 views

Can you really change the password to a mac on reboot without knowing the old one?

I was looking for answers for a configuration issue on my laptop but then I got to reading the answers to this post. There was one that troubled me slightly (the last one by Lauri) which says how to ...
0
votes
1answer
140 views

Did I get hit by the recent Java exploit?

Looks like the website iphonedevsdk was responsible for serving up the malware that's been causing some of the recent security exploits. According to my browser history, I visited that site back in ...
1
vote
1answer
89 views

Should users share OSX crash logs?

OSX stores app crash logs into ~/Library/Logs/DiagnosticLogs/appname_date.crash and optionally submits these anonymously back to Apple. These contain a fair amount of debug info for the developer, ...
8
votes
1answer
450 views

How can I secure my log files?

I have a cool tool that displays my syslog and kernellog on my mac's desktop. This has me concerned about what is written in them - I'm staring to feel like they are creating a hole in my privacy. I ...
2
votes
1answer
2k views

Is there any way to list the contents of the iPhone/OSX Keychain and their security level?

I have a few apps that I purchased from the app store that probably store information in my keychain on OSX and on the iPhone. Since it's possible for keychain items to be bound to a device (and ...
1
vote
2answers
246 views

Dealing with a (possible) virus on both MacOSX and iOS

The symptom: On MacBookAir, in Safari, FF and Chrrome, when accessing www.google.com, I get redirected to a http://developer.yahoo.com/yql/ web page. On iPhone, when navigating to google.com I get ...
2
votes
2answers
342 views

Checklist for securing MacOSX

Is there a checklist for securing MacOSX machines?
3
votes
1answer
579 views

How do I configure Terminal Server (and clients) for use over untrusted Wifi networks?

Suppose a client wants to directly connect to Terminal Server exposed to the Internet, without a VPN, ... what software & settings is needed to properly protect against WiFi based attacks? ...
6
votes
3answers
9k views

Is it possible for a phishing link to install a major virus on a Mac?

My girlfriend recently had her university MS Exchange account hacked. The attacker took over her email account and started using it to send thousands of spam emails. After a while, her email account ...
-1
votes
1answer
166 views

Mac app purchase validation

How do I sell a mac app off of my website without somebody being able to copy-and-paste the app to some friends after he buys it, etc.. I understand that you can use receipt validation when selling ...
1
vote
3answers
1k views

How to set password on applications in Mac OS to prevent an administrator to start them?

Is there any program that can set password on the app like mail or browser? I know about parent control, but I doesn't work with administrator account. What I want is some program that blocks some ...
1
vote
1answer
662 views

Why does the OpenSSH client on Mac OS X silently launch an ssh-agent for the user?

I'm confused by the difference in behavior of ssh clients I'm seeing on two different hosts. Just to be clear, this is the scenario: "macbox" OS X using OpenSSH_5.2p1 ssh client "sunbox" Solaris 10 ...
3
votes
1answer
171 views

Do public keys make Kerberos more secure (RFC4556)?

We're using IPA to centralize our authentication and I found an option to add a public key for each user. After doing a little research I found this to be an extension to Kerberos 5, RFC4556. From my ...
7
votes
3answers
1k views

Who (which process) is calling curl?

On my mac (Lion), I know that curl is bing used by some unknown process to communicate with a server. Basically I installed little Snitch and find out that "somebody" is using curl periodically. ...
1
vote
3answers
1k views

How to secure data before returning Macbook Air?

I am returning my MacBook Air to Apple and want to know the best way to ensure my data is not recoverable from the flash storage. I currently have Filevault 2 enabled, however before I enabled it I ...
2
votes
1answer
1k views

VMWare Fusion Encryption and Snapshotting

VMWare Fusion 5 has an encryption feature that I have enabled, with what I would consider a hard-to-brute-force-crack password. How secure is the data in this VM? If I shut down the VM each time ...
0
votes
1answer
2k views

Is OSX or Mac hardware used in the InfoSec world? What resources are available? [duplicate]

Possible Duplicate: Mac OS X from an IT Security Practitioners' Perspective? I'm new to the OSX world (formerly Windows background) and am interested in understanding what is or isn't ...
6
votes
4answers
475 views

What do you do to protect data on a Macbook in the event of theft/loss of the device?

What setup do you recommend to protect data on a MacBook in the event of theft/loss of the device? I'm specifically interested in Macs here, rather than laptops generally, and in concrete ...
3
votes
1answer
621 views

Does setting a firmware password add security if FileVault 2 is enabled?

On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
2
votes
2answers
341 views

Does GateKeeper on OS X 10.8 offer any reasonable protection from exploits?

OS X 10.8 comes with GateKeeper, which basically has three settings: Allow only apps from Mac App Store Allow only apps from Mac App Store or that are signed with a valid Apple Developer certificate ...
3
votes
2answers
261 views

Chrome: Found a crash, is it a security vulnerability?

I have been able to make Google Chrome crash, and I was wondering if there are tools or heuristics to determine whether or not the crash is a security vulnerability. How can I determine if a Chrome ...
6
votes
2answers
4k views

Need help identifying the OSX process that's generating strange network traffic

Since the past few days, I noticed that my router was a bit slow, and was restarting by itself at times. When looked at it's logs, they had entries like: Friday Jul 13 13:09:02 2012 1 Blocked by DoS ...